PRIVACY POLICY

Last updated: 13 June 2026

FirstRep ("we", "us", the "App") is a fitness and nutrition tracking app. This policy explains what we collect, why, and your rights. By using FirstRep you agree to this policy.

Information we collect

Account information

• Email address (for sign-in and authentication)
• Username and optional profile avatar

Health & fitness data you enter

• Body metrics: weight, height, BMI, gender, age
• Activity data: workouts, exercises, sets, program history
• Nutrition data: calorie and macro logs, calorie/maintenance profile
• Progress entries and progress photos

Photos

• Food and nutrition-label photos you capture for scanning
• Progress photos and avatar images you upload

Automatically collected

• Basic technical data needed to operate the service (e.g. authentication tokens). We do not use third-party advertising or analytics trackers.

How we use your information

• To provide core features: tracking workouts, nutrition, weight and progress
• To analyze food and nutrition-label photos and estimate nutritional content
• To authenticate you and keep your data in sync across sessions

Third-party services

• Supabase — hosts our database, authentication and file storage. See supabase.com/privacy.
• Cloudflare R2 — stores your progress photos. See cloudflare.com/privacypolicy.
• OpenAI — when you scan a food item or nutrition label, the photo is sent to OpenAI's API to estimate nutrition information. Images are sent only when you initiate a scan. See openai.com/policies/privacy-policy.

We do not sell your personal data.

Data retention & deletion

Your data is retained while your account is active. You can permanently delete your account and all associated data at any time from Profile → Delete account. Deletion is immediate and irreversible: it removes your profile, logs, photos and authentication record.

Your rights

Depending on your region — including the UK/EU (UK GDPR & GDPR), the United States (e.g. CCPA), and India (DPDP Act) — you may have the right to access, correct, export or delete your personal data. Account deletion is available in-app; for other requests contact us using the details below.

Children's privacy

FirstRep is intended for users aged 18 and over. Registration requires confirming you are 18 or older, and we do not knowingly collect data from anyone under 18. If we learn that an under-18 has created an account, we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

For privacy questions or data requests, contact support@firstrep.online.